Risk-based authentication and zero trust architecture ZTA
summary
Proposes replacing one‑time checks with a continuous identity posture that scores user and device context (location, device health, behavior) in real time and applies graded access not just allow/deny. Combines continuous monitoring with distributed identity on ledgers — verifiable credentials/DIDs so claims (role, entitlement, age) travel with the user and the service verifies them on the fly instead of trusting stale AD lists. Describes session cutoff on anomaly, automation to remove human error, and ties to WebAuthn/FIDO and zero trust enforcement.
AI-written summary · about
chapters (8)
- 0:00Introduction to session
- 1:04Current authentication challenges
- 8:50Identity posture explained
- 10:15New continuous approach
- 14:33Zero trust architecture limits
- 16:21Distributed identity concept
- 20:11Key takeaways recap
- 24:25Q&A and closing
related talks
26mZero Trust: Continuous Verification in the Modern Enterprise
49mZero Trust Security
17mZero Trust access with zero waiting, zero pain, and zero compromises
31mAttacking Zero Trust Designs in 2021
37mZero Trust at the Edge: Bridging Industrial Systems With Verifiable Credentials and OpenZiti
40mZero Trust and Privacy: Moving Security Closer to the Target
38mIdentity Based Segmentation for a ZTA
31mEmbracing Zero Trust When You Aren't the World's Largest Internet Company